Total 4 Legal / Public / Security job vacancies in sarawak

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

1. Perencanaan program penanganan insiden dengan koordinasi bersama tim SOC & Security Engineer.

2. Identifikasi kerentanan dan serangan-serangan security serta memberikan advice dalam penanganan serangan kepada Internal, L3, manajemen dan/atau pihak eksternal – client Perusahaan.

3. Analisis trend postur keamanan cyber dan Security Risk Assessment terhadao produk dan jasa yang berkaitan terhadap regulasi keamanan siber.

4. Menyusun laporan dan closing insiden dan ringkasan teknis serta melakukan presentasi hasil laporan.

5. Membuat use case dan integrasi ke dalam SIEM dengan koordinasi bersama tim Security Engineer.

6. Bertanggung jawab atas daily operasional di Klien dan meeting rutin dengan koordinasi bersama tim L1, PMO dan yang berkepentingan.

What you will be doing:

• Responsible for implementing safety & security operation to standards and quality 
• Responsible for assisting the Assistant Security Manager in the planning, coordination, organization, staff supervision and quality control for the security operational in order to effect optimum protection of guest, employee and hotel assets
• Responsible for day to day security operation through the effective and efficient of security officers
• Ensure that the hotel and department standards are strictly maintained
• Facilitate effective and reliable communication across all team members / security officers including handovers to next shift supervisors
• Ensures that all security officers are strictly complied with the standards, policies and procedures established by the department
• Strictly monitor, maintain and enhance security officer performance standards

DESKRIPSI PEKERJAAN

• Pengetahuan mendalam dalam proses bisnis IT;
• Pengetahuan mendalam dalam konsep IT Network dan Security serta teknologi terbaru;
• Memiliki kemampuan teknis dalam perencanaan konfigurasi jaringan/keamanan infomasi, Analisa jaringan/keamanan infomasi serta pengelolaan operasional jaringan/keamanan infomasi;
• Menguasai berbagai kemampuan teknis dalam beberapa produk seperti cisco, Huawei, juniper, palo alto, fortigate, serta produk lainnya;
• Memiliki kemampuan teknis terkait perencanaan serta pengelolaan roadmap IT yang terkait dengan jaringan dan keamaman informasi;
• Mampu memahami script coding aplikasi dan teknik dasar dalam database;
• Mampu memahami proses vulnerability assessment dan penetration testing;
• Berpikir konseptual dan sistematis yang kuat;
• Kemampuan bekerja sama.